Network Engineer

Automatic Systems Company is an industry-leading provider of water, wastewater, and industrial controls systems with a proven history of innovation and excellence. The OT Network Engineer will design, implement, secure, and support operational technology (OT) network infrastructure for water, wastewater, and industrial control system (ICS) projects. This role supports the architecture, configuration, deployment, and commissioning of industrial LAN/WAN networks, managed switches, VLAN segmentation, secure remote access, and cybersecurity solutions supporting SCADA and control systems within hybrid IT/OT environments. The OT Network Engineer will ensure all network infrastructure deliverables are completed on schedule, meet cybersecurity and operational standards, and are ready for factory acceptance testing and field deployment.

This position offers the opportunity to work on critical infrastructure projects supporting municipal water and wastewater systems and industrial control systems while helping shape secure and modern OT network architectures for essential public utilities.

Position Responsibilities:

• Collaborate with controls design engineers, programming engineers, and project teams to support the design, configuration, deployment, and commissioning of industrial OT networks and infrastructure for municipal water and wastewater SCADA systems, providing technical guidance and best practices for secure and reliable network architectures.
• Architect secure industrial Ethernet plant and remote-site networks including managed switches, VLANs, routing, wireless communications, firewalls, and IT/OT segmentation.
• Implement and support WAN connectivity solutions including fiber, cellular (Cradlepoint, Sierra Wireless, Digi), licensed/unlicensed radio (MDS, 4RF, Aprisa, CalAmp Viper SC+), and site-to-site and remote-access VPN technologies for treatment plants, lift stations, and remote facilities.
• Configure, harden, and support industrial cybersecurity solutions including firewalls, secure remote access security appliances (Watchguard, SonicWall), MFA, site-to-site and client VPNs, endpoint protection, logging, and backup/recovery systems.
• Support OT server and virtualization infrastructure including Windows Server, VMware/Hyper-V, Active Directory, and related OT support systems.
• Develop and maintain OT network standards, documentation, IP schemas, asset inventories, and cybersecurity best practices for client environments.
• Collaborate with project managers, controls engineers, electricians, and client IT personnel throughout design, testing, commissioning, and deployment phases.
• Support cybersecurity assessments, incident response, disaster recovery, and client compliance efforts aligned with EPA guidance, AWIA requirements, WaterISAC recommendations, NIST SP 800-82, and IEC 62443 standards.
• Assist with project scoping, estimating, and development of standardized OT network architectures and reusable configurations.
• Occasional travel to project sites for commissioning and deployment support as needed.

Do you have experience in VPN management?, * Bachelor's degree in Computer Engineering, Electrical Engineering, Computer Science, Information Technology, or related field; equivalent experience considered.

• 5 to 10+ years of experience designing and supporting OT/ICS network infrastructure in industrial, utility, or critical infrastructure environments.
• Strong knowledge of:

• Industrial Ethernet Networking
• Managed switches and VLANs
• WAN Technologies and remote communications
• Industrial firewalls and VPNs
• OT Cybersecurity best practices
• SCADA and industrial control system communications

• Experience with OT cybersecurity frameworks and standards such as:

• ISA/IEC 62443
• NIST SP 800-82
• WaterISAC guidance
• Purdue Model architecture

• Experience with virtualization platforms, Windows Server environments, and industrial remote-access solutions preferred.
• Excellent troubleshooting, communication, and project coordination skills with the ability to work effectively with engineers, contractors, operators, and client IT personnel.
• Preferred certifications include CompTIA Security+, Cisco CCNA/CCNP, Fortinet NSE, ISA/IEC 62443 Cybersecurity Fundamentals, or GICSP.

Pulled from the full job description

• 401(k)
• Health insurance
• Paid time off
• Vision insurance
• Dental insurance
• Life insurance, * Health insurance
• 401(k)
• Dental insurance
• Life insurance
• Paid time off
• Vision insurance